Companies are pulling out all of the stops to attract top talent in a tight labor market. These tips could help companies attract and retain cybersecurity pros in the months ahead. Image: iStock/nd3000 A number of high-profile cyberattacks on critical U.S. infrastructure have brought conversations surrounding network security to the forefront for companies around the globe. In May, Gartner forecasted risk management service and information security spending to exceed $150 billion in 2021, representing a…

In the last week there has been change, but a lot remains the same, too. First, we are now McAfee Enterprise, a pure-play enterprise cybersecurity company under the new ownership of Symphony Technology Group (STG). It’s an exciting change and true focus for our company, allowing us to concentrate on enterprise and commercial business needs. Our partners are an important part of our journey, and together we are excited to continue to win and drive…

Exploring the public cloud and addressing its unanticipated security challenges By Chuck Slate, Lead Architect, Attivo Networks, Inc. On a traditional network, user accounts are the main identity type and, therefore, the primary security focus. In the public cloud, the concept of identity is extended to any object with entitlements (permissions) to another object. This includes “non-human” identities like applications, containers, virtual machines, and other object types that have historically played the role of a…

Introduction The DotNet based CyaX-Sharp loader, also known as ReZer0, is known to spread commodity malware, such as AgentTesla In recent years, this loader has been referenced numerous times, as it was used in campaigns across the globe. The tale of CyaX-Sharp is interesting, as the takeaways provide insight into the way actors prefer to use the loader. Additionally, it shines a light onto a spot that is often left illuminated: the inner workings of…

Companies in the U.S. were targeted more than those in any other country, according to Accenture’s Cyber Incident Response Update. Image: Yuichiro Chino/Moment/Getty Images The volume of cyber intrusion activity globally soared in the first half of 2021 compared with the same period last year, according to Accenture’s Cyber Investigations, Forensics & Response midyear update. The triple-digit increase (125%) was driven primarily by web shell activity, which is the use of small pieces of malicious…